Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
File: NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json)
Hash identifier: ZPVQcbIt8kn1PJ/iMD6uXME0KVYmfGC5D5ATA8kaxwk=
Subject key identifier: F8:B6:56:59:DA:70:DB:EF:95:0E:64:4E:25:F3:8F:F1:56:B8:01:71
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial: 0198D65F295AF35F0837196E7B5A7C3EE433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:17 +0000
Manifest this update: Sat 23 Aug 2025 10:00:17 +0000
Manifest next update: Sun 24 Aug 2025 10:00:17 +0000
Files and hashes: 1: Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa (hash: +iXd1M4+bcqd1pD4b5qHzxAyt89KMtB2DGWb5orKRYY=)
2: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: fIxoL0srq5ak7SE57FULznay/Zop2dzB/PeEq6QoXY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:29:5a:f3:5f:08:37:19:6e:7b:5a:7c:3e:e4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
Validity
Not Before: Aug 23 10:00:17 2025 GMT
Not After : Aug 24 10:00:17 2025 GMT
Subject: CN=f8b65659da70dbef950e644e25f38ff156b80171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:74:90:cc:7b:8f:19:37:32:2e:c1:1c:f9:
dc:cf:d7:e9:56:cf:69:92:8d:70:ed:65:36:eb:90:
dd:cd:28:f4:16:88:43:f8:3b:41:37:df:1f:e8:3f:
1e:4d:21:11:da:02:60:df:d0:4d:ba:f0:d6:92:2a:
85:10:56:fa:e3:77:dc:ba:a6:c2:55:61:cf:9e:e1:
82:97:14:be:59:c0:66:e8:ee:bc:7f:41:ac:2b:12:
85:ec:8a:2d:c2:ee:3b:15:2c:4f:d0:c7:df:87:f4:
9d:4f:ac:19:4b:d2:fe:62:ed:37:35:67:e8:35:7b:
10:91:06:cd:c4:d9:1a:df:8d:69:50:26:a5:bb:5b:
d2:e5:0e:db:dd:d4:52:bb:af:bc:71:b7:12:ed:5a:
3f:2f:88:66:26:15:f5:11:e8:18:62:09:ce:1b:5b:
19:67:90:00:3a:52:61:1c:55:94:16:e9:61:54:65:
00:6f:ac:42:64:ff:17:c2:60:83:54:37:0f:59:79:
17:b4:4f:20:fa:cd:01:ce:87:fd:b1:5e:a3:9b:c0:
75:25:9f:fd:65:52:cb:d9:8d:1f:3f:53:57:0a:a2:
63:c0:14:1b:e2:3a:d9:88:2d:a8:b4:2d:3d:a7:0d:
98:9b:85:ef:6b:61:28:68:0a:db:ea:1f:b5:37:c8:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B6:56:59:DA:70:DB:EF:95:0E:64:4E:25:F3:8F:F1:56:B8:01:71
X509v3 Authority Key Identifier:
keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:ab:e5:09:89:eb:e9:3b:98:ff:39:66:af:95:83:42:a4:38:
a4:00:59:c0:bf:b0:ee:58:d6:e0:d6:1b:84:6d:29:f0:88:35:
e3:95:65:52:76:5c:c5:18:44:3a:3d:58:09:41:dc:7a:80:84:
b3:9e:a9:7e:f5:52:e0:8f:d3:41:c2:11:63:0a:84:c3:39:78:
25:5f:0f:aa:37:43:ee:4a:7a:77:05:5d:ae:f1:c2:1c:8c:ac:
e8:2a:3f:0b:74:27:76:20:3c:a5:4c:8a:89:7d:90:1b:04:21:
c4:e8:e1:b2:78:e2:fa:2e:ce:d4:e4:29:e1:7d:8d:0c:bf:f3:
f4:84:a3:9c:e4:ec:09:76:53:2a:55:21:d7:9b:68:d2:0c:d3:
cf:b9:8c:d7:bd:7c:6f:f4:ab:e8:9e:85:e4:e6:5f:7e:53:f3:
e6:5c:6d:82:50:f2:11:d0:e6:e2:ec:3c:2e:f9:45:ce:46:25:
9e:d2:6b:e9:e5:3e:8f:0c:d1:e4:f9:da:f5:9e:33:de:d0:1b:
51:33:d9:6e:8e:ab:ab:5b:e0:b1:c6:2e:96:98:87:24:64:7f:
27:6c:e5:2a:28:7b:84:42:60:f7:9e:21:12:a7:40:73:63:4a:
2a:8a:80:90:bb:26:be:c8:72:09:1c:29:e3:6d:ba:79:6d:0e:
55:68:59:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXyla818INxlue1p8PuQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NTYwOGQwNzhkNmYzMWNmNzliZTc4NzM2YmY4ODQ2MDZh
MTdkYTQwHhcNMjUwODIzMTAwMDE3WhcNMjUwODI0MTAwMDE3WjAzMTEwLwYDVQQD
EyhmOGI2NTY1OWRhNzBkYmVmOTUwZTY0NGUyNWYzOGZmMTU2YjgwMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4x0kMx7jxk3Mi7BHPncz9fpVs9p
ko1w7WU265DdzSj0FohD+DtBN98f6D8eTSER2gJg39BNuvDWkiqFEFb643fcuqbC
VWHPnuGClxS+WcBm6O68f0GsKxKF7Iotwu47FSxP0Mffh/SdT6wZS9L+Yu03NWfo
NXsQkQbNxNka341pUCalu1vS5Q7b3dRSu6+8cbcS7Vo/L4hmJhX1EegYYgnOG1sZ
Z5AAOlJhHFWUFulhVGUAb6xCZP8XwmCDVDcPWXkXtE8g+s0Bzof9sV6jm8B1JZ/9
ZVLL2Y0fP1NXCqJjwBQb4jrZiC2otC09pw2Ym4Xva2EoaArb6h+1N8gZTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPi2VlnacNvvlQ5kTiXzj/FWuAFxMB8GA1UdIwQY
MBaAFDVWCNB41vMc95vnhza/iEYGoX2kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iODQxOTUtY2Q0Ni00OWNiLTg1Zjgt
NmViNDNiNTU2ZTEzLzEvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iODQxOTUtY2Q0Ni00OWNiLTg1ZjgtNmViNDNiNTU2ZTEz
LzEvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA26vlCYnr
6TuY/zlmr5WDQqQ4pABZwL+w7ljW4NYbhG0p8Ig145VlUnZcxRhEOj1YCUHceoCE
s56pfvVS4I/TQcIRYwqEwzl4JV8PqjdD7kp6dwVdrvHCHIys6Co/C3QndiA8pUyK
iX2QGwQhxOjhsnji+i7O1OQp4X2NDL/z9ISjnOTsCXZTKlUh15to0gzTz7mM1718
b/Sr6J6F5OZfflPz5lxtglDyEdDm4uw8LvlFzkYlntJr6eU+jwzR5Pna9Z4z3tAb
UTPZbo6rq1vgscYulpiHJGR/J2zlKih7hEJg954hEqdAc2NKKoqAkLsmvshyCRwp
4226eW0OVWhZfQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:54 2025 by rpki-client